What PIN Verification Value is
A PVV is a cryptographic reference value an issuer uses when checking a cardholder's entered PIN against the card account. It provides a way to verify a PIN without storing the actual PIN itself. The issuer, or a service provider working for the issuer, manages the verification data.
A PVV is different from a PIN (Personal Identification Number). The PIN is the secret number a cardholder enters. The PVV is issuer-side data used to check that number. It is also different from the PIN verification process, which is the check performed during a transaction.
A valid PVV check confirms the PIN matches the card details, not that the physical card is genuine.
How a PVV check works
For online PIN verification, the cardholder enters a PIN at a PIN pad. The PIN is encrypted before it travels through the payment system. The issuer or its designated service provider checks the encrypted PIN data against the issuer-held verification value and card data.
PIN-related comparisons belong inside a hardware security module, or HSM, which protects sensitive cryptographic operations. The merchant does not calculate or validate the PVV. A successful check confirms that the entered PIN matches the card details, but it does not prove the physical card is genuine.
What it means for your business
A PVV is not a separate merchant processing fee, and it is not one of the three card-cost layers: interchange, network fees or processor markup. There is no PVV-specific charge for you to negotiate. It is issuer-side security data, not a standard merchant statement line.
The distinction matters when you investigate a suspicious payment. A valid PIN check does not rule out a cloned magnetic-stripe card or compromised payment device. PIN entry devices must meet applicable payment-security requirements, and a PIN check is only one part of transaction security.
What you can actually change
You cannot set or adjust a cardholder's PVV. You control the security of your acceptance environment, including the devices that capture PINs and the steps staff take when a terminal looks altered.
- Use PIN-entry devices that meet applicable PCI PIN Security and PCI PTS requirements.
- Inspect terminals and PIN pads routinely for tampering, loose cables or unexpected attachments.
- Position cameras so they do not record customers entering PINs.
- Treat a successful PIN check as one security signal, not proof that the physical card is genuine.
- Inspect PIN devices. Add PIN pads and terminal connections to your routine physical security checks, and document anything that looks altered.
- Verify device compliance. Confirm your PIN-entry equipment meets applicable PCI PIN Security and PCI PTS requirements.
- Review suspicious sales. When a PIN-verified transaction looks unusual, consider device and card risks as well as the PIN result.
Frequently asked questions
Is a PVV the same as a PIN?
No. The PIN is the number the cardholder enters. The PVV is issuer-side cryptographic data used to check that PIN without storing the actual number.
Does a PVV appear on a merchant statement?
A PVV is issuer-side verification data, not a standard merchant fee line. It does not create a separate charge for you to negotiate. Review your statement for the actual processing and network fees billed to your business.
Does a successful PVV check prove a card is genuine?
No. It confirms that the entered PIN matches the card details, but it does not establish that the physical card is genuine. A cloned magnetic-stripe card can use valid account information, so secure and inspect your payment devices.